←back to thread

Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

(support.mozilla.org)
757 points shak77 | 1 comments | 15 Dec 17 13:47 UTC | HN request time: 0.269s | source
Show context
shak77 ◴[15 Dec 17 13:47 UTC] No.15931738[source]▶
This is what it looks like: https://imgur.com/a/mriUw

It scared the hell out of me! Are these guys losing their minds?

It was reported as a bug and the response thus far is indeed underwhelming for such a severe issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1424977

replies(2): >>15931793 #>>15931902 #
bwat49 ◴[15 Dec 17 14:15 UTC] No.15931902[source]▶
It wasn't supposed to be visible on the addons page
replies(2): >>15931947 #>>15932098 #
mark-r ◴[15 Dec 17 14:21 UTC] No.15931947[source]▶
I don't think that makes it better. Knowing that there's a way to get an addon installed invisibly is going to be more justification for paranoia.
replies(2): >>15931973 #>>15932176 #
dahart ◴[15 Dec 17 14:50 UTC] No.15932176[source]▶
There almost certainly is not a way to invisibly install add-ons, unless you are part of Mozilla, and, you know, making Firefox. If paranoia is your thing, it might be worth considering that Mozilla can do anything it wants inside Firefox core, all of it is "invisible" to you.
replies(2): >>15932415 #>>15932871 #
kuschku ◴[15 Dec 17 16:22 UTC] No.15932871[source]▶
And this is the point where even the most Mozilla-supporting users move away. For me, this is it, I’m going to Chromium.

Fuck this shit, in the past months we had CliqZ https://news.ycombinator.com/item?id=15421708, we had Mozilla adding new telemetry, we had Mozilla force-enable toolkit.telemetry.enabled, we had Mozilla say that, if you download Nightly, that is considered opt-in to tracking, we had Mozilla put Google Analytics into the Addons menu (because it’s loaded from addons.mozilla.org: https://github.com/mozilla/addons-frontend/issues/2785 ), and we had Mozilla say that, if we don’t trust Google, we shouldn’t use Firefox.

Fuck this.

replies(3): >>15933274 #>>15933605 #>>15936508 #
1. programd ◴[15 Dec 17 17:54 UTC] No.15933605[source]▶
Regarding telemetry, take a look at the settings in about:config. There are several toolkit.telemetry.Ping settings which are set to true by default. In the spirit of charity I'm going to assume that those phone home pings - on startup, shutdown, update - are not enabled unless telemetry is enabled. But I have not checked...